Phishing Video and Assessment

This custom phishing campaign was created for a corporate client to address rising security risks and sophisticated phishing scams. The campaign involved the creation of an instructional video, mini course, and interactive assessment.

Phishing video development

This is an animated image from the final video of bearded medieval man sitting in a wooden boat, fishing with a simple pole. There is an outline of a castle in the background.

Animated still from the final video of a surprised looking modern businessman in a suit. He sits at a desk surrounded by various files and messages that dangle from fishing hooks hanging all around him.

GENERIC_Phishing_Animation.mp4

Still image of the video script for the accompanying images. It is in a table format with one column describing the audio and one column describing the audio. The VO (voice over) text in the first row cell reads: "For centuries, fishing was the simple act of dropping a line in the water to catch some supper." The accompanying video description reads: Animation: Character sitting in boat circa Middle Ages with simple stick and rope dangling in water with large fish nibbling at his line and then swimming away, disinterested. The second row of audio cell reads: "In this digital age, the term Phishing has evolved to mean something quite different." The accompanying video description reads: CUT TO: Modern consultant character in office setting. Character working away oblivious and not noticing the Phishing hooks around him. Fishing lines and hooks drop from top of frame and begin to “catch” various images that represent secure information around the office. (Client Data, HR Data, SSO Log-In, Confidential Info, Deal Documents, Financial Reports)

Stills from final video with corresponding video script.

Final mp4 video cut.

Challenge: To create an engaging and effective multimedia phishing avoidance training for employees of a highly-mobile multinational company.

Process: Part of a larger digital security campaign, we collaborated with company stakeholders to identify specific concerns and circumstances around phishing vulnerabilities. We then utilized industry best practices around cyber security to lay out a course and assessment strategy that could be deployed across all employees regardless of location.

Design: Working with the visual design team at Luminous Animals, we developed a video script and storyboard that was engaging, fun, and modern in its graphics and storytelling. We then created an accompanying digital activity that was interactive and reinforced key behaviors and habits to help employees avoid phishing scams both on their laptops and personal devices. Follow-up "mini-lessons" were then sent to all employees periodically to continue reinforcing desired behaviors as well as to keep employees updated on new developments in cybersecurity.

Outcome: Employees achieved 100% compliance for the initial training. Instances of falling for company-created phishing emails and texts dropped precipitously over the next year. (One notable exception was a company announcement offering free tickets to Hamilton.)

My Role: My participation on the project was as lead Instructional Designer. This included:

Collaborating with stakeholders to identify objectives and KPIs of the training
Video scripting
Storyboards and wireframes
Collaborating with the visual design group and engineering teams
Managing feedback rounds

Wireframing for phishing activity and screenshot of final activity.

Page updated

Google Sites

Report abuse